الوسطاء والإعدادات

# settings.py
MIDDLEWARE = [
    "django.middleware.security.SecurityMiddleware",
    "django.contrib.sessions.middleware.SessionMiddleware",
    "django.middleware.csrf.CsrfViewMiddleware",
    "django.contrib.auth.middleware.AuthenticationMiddleware",
    # ...
]

DEBUG = False              # دائمًا False في الإنتاج
ALLOWED_HOSTS = ["example.com"]
SECRET_KEY = "..."         # سرّي
DATABASES = { ... }
TIME_ZONE = "Asia/Riyadh"
LANGUAGE_CODE = "ar"

import os
SECRET_KEY = os.environ["SECRET_KEY"]
DEBUG = os.environ.get("DEBUG") == "True"

def simple_middleware(get_response):
    def middleware(request):
        # قبل الـ view
        response = get_response(request)
        # بعد الـ view
        return response
    return middleware